Hacker News Reader

We do this differently at Meldium (YC W13) and reliably provide a way to share passwords without end-users seeing them. The login occurs on the server side and only the session is transferred to the sharee's browser. Thus, the password is truly never shared or sent down over the wire.

View on HN

This is interesting and certainly solves the problems mentioned in the article. However, it does introduce a whole bunch of new attack vectors.

Have you thought about the idea of selling the product as a machine that clients can run in house? Something that is only accessible to them, similar to how GitHub enterprise works.

We definitely intend to provide the secure vault component as something you can host internally (exactly like GitHub Enterprise).

Reply on news.ycombinator.com